 
 
 (defendpoint GET "/:id" [id]
-  ;; TODO - permissions check
   (let-404 [{:keys [can_read] :as query} (sel :one Query :id id)]
     (check-403 @can_read)
     (hydrate query :creator :database :can_read :can_write)))

  {:TODO "TODO"})


(define-routes)

(ns metabase.api.query
  (:require [korma.core :refer [where subselect fields order limit]]
            [compojure.core :refer [defroutes GET PUT POST DELETE]]
            [clojure.data.json :as json]
            [medley.core :refer :all]
